IT security 2026-10-31

Level Critical — 100/100 — 2026-10-31

Critical day: 28 stories ranked, 8 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: GitLab Integer Overflow Vulnerability Exploited (93/100).

1. GitLab Integer Overflow Vulnerability Exploited — 93/100 (CVE-2026-97229)
2. Google Brotli Buffer Overflow Vulnerability — 87/100 (CVE-2026-111497)
3. Unauthenticated RCE in BeyondTrust Remote Support — 81/100 (CVE-2026-102764)
4. Ivanti Connect Secure vulnerability being actively exploited — 78/100 (CVE-2026-118527)
5. Tampered Claude Code extension version 2.1.313 on Open VSX planted SSH backdoor — 76/100
6. Linux Kernel TCP Flaw With High CVSS Score — 70/100 (CVE-2026-98432)
7. Massive exploitation campaign targeting WordPress RCE — 70/100
8. Unauthenticated race condition in WordPress allows remote code execution — 70/100
9. Multiple Linux kernel vulnerabilities in Red Hat and SUSE distributions — 70/100
10. Ivanti Connect Secure privilege escalation vulnerability — 65/100 (CVE-2026-111357)